security-coding-agent

Plugin security-coding-agent from marketplace software-agents-team in gagandeepp/software-agent-teams. Commands read from the repo's manifest — 1 month ago.

Skills (8)

• code-review

  Use when reviewing security remediation changes — verifies fixes are correct, don't introduce regressions, follow guidelines, and don't weaken existing security controls

• commit-push-pr

  Use when committing, pushing, and raising a PR — stages changed files, writes a Conventional Commits message, pushes to the remote branch, creates a GitHub PR via gh CLI, then posts the PR URL to configured Slack or Teams channels for review. Channel targets are configurable via .commit-push-pr.json

• config-resolver

  Use when resolving security coding agent configuration — reads .security-agent.json, merges with per-invocation overrides, validates governance constraints, and returns the resolved scanners, thresholds, and guidelines paths

• guidelines-ingestion

  Use when loading and merging remediation guidelines for active security scanners — performs deterministic section-level merge of scanner module defaults, org custom guidelines, and per-invocation overrides into a single instruction set

• scanner-detection

  Use when auto-detecting which security scanners apply to the current repository — scans for GitHub remote, CI configs, dependency manifests, Terraform files, Docker configs, and scanner-specific artifacts

• security-guardrails

  Use at the start and end of every security review session — thin adapter invoking shared guardrails gates with security-specific context. Blocks completion if any unfixed P0 scanner finding is present. Flags suppressed findings without justification comment as P1. Lint and coverage skipped (null).

• triage-and-prioritize

  Use when merging and triaging security findings from multiple scanners — deduplicates cross-scanner findings, assigns unified P0-P3 priority, and determines auto-fix vs Jira ticket actions

• write-security-tests

  Use when writing regression tests for security fixes — ensures vulnerabilities stay fixed and detects regressions if the fix is accidentally reverted

Slash commands (2)

• /security-coding-agent:security-init

  Scaffold a .security-agent.json configuration file and check prerequisites

• /security-coding-agent:security-review

  Run GHAS, Snyk, and SonarQube security scans in parallel on the current branch and report findings on the CLI

Subagents (1)

• security-coder

  Use this agent when you need to triage and remediate security findings from GitHub Advanced Security, SonarQube, Snyk, and Wiz. This agent detects active scanners, loads team remediation guidelines, uses LSP for diagnostics, and follows scanner-specific best practices.\n\n<example>\nContext: User ne

Hooks (3)

• SessionStart

  "${CLAUDE_PLUGIN_ROOT}/hooks/run-session-start"

• PostToolUse

  "${CLAUDE_PLUGIN_ROOT}/hooks/run-posttooluse-sync"

• Stop

  "${CLAUDE_PLUGIN_ROOT}/hooks/run-stop-memory"

Similar plugins